Unverified Commit 20fcd7d4 authored by Matteo Pacini's avatar Matteo Pacini Committed by GitHub
Browse files

nixos/murmur: Enable PrivateMounts hardening in service config (#448490)

parents 40fcde85 21d81266

nixos/modules/services/networking/murmur.nix

+1 −0
Original line number Diff line number Diff line
@@ -347,6 +347,7 @@ in 
        MemoryDenyWriteExecute = true;

        NoNewPrivileges = true;

        PrivateDevices = true;

        PrivateMounts = true;

        PrivateTmp = true;

        ProtectClock = true;

        ProtectControlGroups = true;